Key points
Numendo supports Assura in achieving ISO 27001:2022 certification through a comprehensive setup: initial diagnostic, drafting of the security documentation framework, KPI definition, and execution of a mock audit. This intervention guarantees ISMS robustness and compliance with international cybersecurity standards.
2
female experts deployed to cover the complete compliance cycle
27001
structuring of the Information Security Management System
CONTEXT
As part of its ISO 27001 certification project, Assura’s IT department sought to strengthen its information security governance. The challenge was transforming an initial gap analysis into an operational Information Security Management System (ISMS), while ensuring the rigorous formalization of security practices to meet certification audit requirements.
intervention
Numendo deployed a duo of experts (Senior Consultant and Lead Implementer) to cover the entire compliance cycle:
• Diagnostic & Governance: Conducting the gap analysis, delivering strategic recommendations, and providing advisory support on ISMS setup.
• Documentary Engineering: Drafting and structuring policies, procedures, operating modes, and technical instructions (notably around identity and privileged access management).
• Performance Management: Defining dashboards, key performance indicators (KPIs), and collecting audit evidence.
• Audit & Validation: Executing an ISO 27001 mock audit to validate compliance prior to official certification auditors’ review.
• Operational Support: Providing editorial and methodological guidance to service managers and business stakeholders.
• Diagnostic & Governance: Conducting the gap analysis, delivering strategic recommendations, and providing advisory support on ISMS setup.
• Documentary Engineering: Drafting and structuring policies, procedures, operating modes, and technical instructions (notably around identity and privileged access management).
• Performance Management: Defining dashboards, key performance indicators (KPIs), and collecting audit evidence.
• Audit & Validation: Executing an ISO 27001 mock audit to validate compliance prior to official certification auditors’ review.
• Operational Support: Providing editorial and methodological guidance to service managers and business stakeholders.
results
Through this collaborative approach, Assura now possesses a complete documentation framework and a structured ISMS ready for certification. The coordination between strategic advisory and operational production accelerated compliance. The institution now benefits from increased visibility into its risks and a strengthened security culture backed by formalized, measurable processes.
